
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier: lvgXsc3qjY3o9xVBsO4BvNu0lDmtzlPry15Zc8rfolY=
Subject key identifier: 6F:CD:02:D1:41:71:3E:22:B6:D4:55:4E:72:C0:CF:B4:DB:70:4F:F2
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 35FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number: 3593
Signing time: Wed 06 May 2026 14:52:41 +0000
Manifest this update: Wed 06 May 2026 14:52:40 +0000
Manifest next update: Wed 13 May 2026 14:52:40 +0000
Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: ugwLxKQ36WC59VwgutykTz2OEXWwWhKA2E8A+3H4PS8=)
2: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: UKXFh7gTm0rXHnOIQY0kDYmGOiQsiOQkbThjpV/y9Uk=)
3: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: qLKIOz6Oedhwx38zJO/77LtAdjmKeuJ/j9qSOecidn0=)
4: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8UZTwXBUXA7yxIQmBCYd7utQyxqxmd+gxoz97Gybm9s=)
5: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: DAjpYy2F7JuENdM1mCWzZ4UuisI9F+H32xQyrUo660o=)
6: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 81ReA4BHk/lxP9lEIuQUr4XFnT42WFD0y3bTKzIXKJE=)
7: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: usfpiMLWoGDExv0ZzDkffe8BVX1FZLRCU+Dn0/pmF+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13822 (0x35fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: May 6 14:52:40 2026 GMT
Not After : May 13 14:52:40 2026 GMT
Subject: CN=69fb55b8-96f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:21:01:3a:eb:b5:47:ca:b7:83:33:5c:65:
75:40:e5:6a:91:a1:b4:1b:d3:8a:c7:48:97:5e:dd:
b0:f4:f6:58:8a:86:3e:df:76:5a:9f:cd:57:3a:dc:
4c:db:17:49:7a:33:77:9b:9b:aa:2d:85:48:a3:f2:
d3:d4:23:03:0f:3a:67:1c:f3:73:fb:93:3e:96:a4:
d7:4a:63:f5:1c:4e:2d:d7:19:c8:a4:95:40:0a:99:
35:7d:e4:ce:06:d1:7c:c4:59:bc:cd:7a:58:aa:41:
6b:f3:4d:a8:0f:05:84:d5:1f:90:98:2c:3e:cb:9a:
b3:c6:04:93:a3:58:04:cd:24:22:ab:98:83:1a:60:
fd:0d:51:64:a5:c9:f8:6c:6c:1c:3e:38:c2:61:be:
9e:70:08:1c:8f:47:2b:c2:31:12:2e:74:c6:24:9c:
af:6e:11:22:66:46:dd:fb:9d:e1:f1:e8:07:17:05:
99:3b:43:75:23:1d:4a:c5:4e:86:54:f5:2d:07:85:
d6:fd:2e:40:ac:93:ab:ea:ea:13:49:19:79:c6:59:
4b:c3:73:2e:e9:b7:42:c3:cd:44:52:44:d2:12:3e:
e1:3a:9c:d8:f6:e4:8a:75:8e:03:a2:50:bd:44:83:
02:3c:15:8f:a0:bb:39:68:2b:a2:b9:25:25:a8:cd:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:02:D1:41:71:3E:22:B6:D4:55:4E:72:C0:CF:B4:DB:70:4F:F2
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:4a:c7:16:25:89:f9:a8:40:0c:93:f8:5d:e7:3c:62:36:
9c:b3:3a:51:bd:5c:67:3b:2b:cf:97:18:22:8e:37:0a:d2:3d:
32:cb:92:db:29:df:0e:47:c0:7b:4c:35:9e:67:ea:04:83:09:
24:49:c5:e9:0e:61:e1:a1:43:1b:dd:92:45:c4:aa:7b:86:f5:
92:eb:35:b7:c8:21:b2:16:30:37:c7:90:95:ae:d8:46:e5:39:
62:1e:17:c8:f7:d4:22:82:d6:01:14:58:5e:0a:47:84:ac:b3:
db:88:06:6e:cb:0c:f0:ce:0d:6d:49:98:73:8e:2a:94:3a:0f:
69:14:87:2a:64:04:c3:21:54:5e:f1:4b:bc:ab:9a:62:f8:07:
89:c9:7f:1b:5b:b9:38:72:63:17:66:74:7f:df:f1:21:d4:63:
ff:ab:62:21:9f:37:3c:51:7e:a9:16:09:ce:73:b7:4a:e0:12:
26:82:7e:11:66:64:a6:56:b8:7b:05:5c:eb:dc:c1:64:d0:5b:
46:ca:c7:da:09:1b:45:e9:b8:6f:62:d9:80:67:6c:3a:ee:dd:
0e:47:35:fc:e0:06:b5:2c:9b:14:16:31:cb:2e:ae:f0:84:ad:
93:78:2a:ad:a4:a1:84:97:65:88:a9:23:fe:a1:44:43:fc:72:
b5:18:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:02 2026 by rpki-client